L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

qilin25 menções

Booba Project10 menções

N0n8 menções

Whitearmor8 menções

everest8 menções

emperador7 menções

play7 menções

Falcon3 menções

payload3 menções

BYOD2 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

playTailormade LogisticsDK · Transportation · 2026-10-27

playCoast 2 CoastUS · Retail & E-Commerce · 2026-10-27

playVPC BuildersUS · Professional Services · 2026-10-27

playHygienaUS · Healthcare · 2026-10-27

playMoney Concepts CapitalUS · Financial Services · 2026-10-27

playMicroSearch— · Technology · 2026-10-27

playQLCUS · Technology · 2026-10-27

Whitearmorwagyu.xyz— · Retail & E-Commerce · 2026-10-27

Booba ProjectHorizon Eye Specialists & LASIK CenterUS · Healthcare · 2026-10-27

direwolfGRUPO PETROILMX · Energy & Utilities · 2026-10-27

Booba ProjectHudson River MuseumUS · Education · 2026-10-27

Booba ProjectBASS Medical GroupUS · Healthcare · 2026-10-27

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27

CVE-2026-96378MEDIUM

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decoupled Checkout allows Object Injection. This issue affects Commerce Decoupled Checkout versions: from 1.0.0 to 1.8.0.

AFFECTED SURFACEProduct not specified

CVE-2026-96377MEDIUM

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation. This issue affects Combined image style versions: from 0.0.0 to 1.0.7.

AFFECTED SURFACEProduct not specified

CVE-2026-96376MEDIUM

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96375MEDIUM

Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96374MEDIUM

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, from 2.1.0 to 2.1.5.

AFFECTED SURFACEProduct not specified

CVE-2026-96373LOW

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96372MEDIUM

Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96371MEDIUM

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96370MEDIUM

Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96369LOW

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96368MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96367MEDIUM

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96366MEDIUM

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96365HIGH

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96364MEDIUM

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96363ANALYSIS

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96362MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96361MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96360LOW

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96359MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96358MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96357MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96356MEDIUM

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified

CVE-2026-96355CRITICAL

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

AFFECTED SURFACEProduct not specified